Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130332e302f32342d3234203d3e20323635393035.roa
File:                     3133312e3139362e3130332e302f32342d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          MgwFRMi4RFqpgOS6ccgdApmkjMfDbb6ViOikf7A46EA=
Subject key identifier:   D2:F9:18:3D:34:7D:FB:7C:2D:3C:3E:36:2F:B7:41:62:74:E6:67:A8
Certificate issuer:       /CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
Certificate serial:       3F00DD999E4F5ED031BF28A6D3B3B8999051637A
Authority key identifier: 3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130332e302f32342d3234203d3e20323635393035.roa
Signing time:             Mon 04 Oct 2021 18:49:12 +0000
ROA not before:           Mon 04 Oct 2021 18:44:12 +0000
ROA not after:            Mon 03 Oct 2022 18:49:12 +0000
asID:                     265905
IP address blocks:        131.196.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:00:dd:99:9e:4f:5e:d0:31:bf:28:a6:d3:b3:b8:99:90:51:63:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
        Validity
            Not Before: Oct  4 18:44:12 2021 GMT
            Not After : Oct  3 18:49:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:dc:7f:93:99:25:36:a3:a4:aa:0b:37:2e:
                    71:9f:5a:07:b2:5c:92:b2:32:4c:58:c5:7c:9c:09:
                    f8:7f:41:e6:62:43:fb:d9:ef:75:7b:8a:b4:3a:4f:
                    f6:22:4d:76:33:7b:a2:d4:3a:16:b0:7e:2e:f4:6e:
                    79:d6:e1:11:5c:70:0c:d0:94:73:ef:db:52:7c:0a:
                    d4:4c:e5:9a:90:20:c6:a1:56:ac:aa:c7:bf:cc:b9:
                    5b:07:18:2f:1c:c5:55:7b:31:90:06:f6:8a:6a:90:
                    9a:1e:33:f4:28:20:f1:7c:d8:ee:b1:a6:b3:08:49:
                    0b:1c:e0:1d:b1:a4:f7:2e:2d:42:2a:24:f9:b8:dd:
                    32:ab:7e:73:b4:a7:61:92:d7:9e:b3:83:ff:b0:d6:
                    dd:e7:1b:c5:e3:8a:c8:fa:54:d7:d2:00:e7:34:1d:
                    9f:a2:11:9b:ba:da:ac:dd:ea:92:00:c9:31:b7:8b:
                    a3:69:04:99:e9:83:23:e9:c1:87:31:57:60:a6:fc:
                    33:ce:bb:1e:42:5a:76:2b:21:b1:2d:5a:05:8b:fa:
                    84:af:36:c3:54:ab:3d:12:5a:c0:bd:53:b5:ef:c0:
                    61:76:e3:03:77:2d:eb:f6:7b:98:ae:3f:7a:a8:3f:
                    f1:39:24:f0:70:8e:97:53:0b:66:aa:56:09:26:2e:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F9:18:3D:34:7D:FB:7C:2D:3C:3E:36:2F:B7:41:62:74:E6:67:A8
            X509v3 Authority Key Identifier:
                keyid:3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130332e302f32342d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:b2:bf:cc:25:a1:fc:69:22:1d:55:70:40:9e:4a:27:63:
         81:ba:2d:ee:5c:13:ba:fd:16:6a:2f:58:be:7f:af:e5:99:bc:
         ba:2e:c3:18:75:22:e4:31:9d:f6:5e:de:c8:2b:37:da:8c:d6:
         0c:04:9d:f3:59:30:39:62:1e:e9:da:45:0e:1c:ba:3b:fa:a7:
         82:2b:ad:e0:91:82:b4:dc:6f:77:2b:b8:c4:dc:f3:cb:2e:c4:
         cf:55:fd:51:8c:39:e9:d5:c1:60:51:98:44:1e:38:da:81:6d:
         cd:25:7b:a4:9f:1b:c5:1e:f2:90:df:26:9d:b8:d0:0f:61:96:
         0f:44:eb:a3:73:0b:4a:fc:03:32:bd:28:bc:51:be:9b:1e:ed:
         57:7c:d4:40:f8:d6:d6:0a:44:95:76:ab:d5:2e:a8:83:92:53:
         6d:ff:e8:ce:2e:a4:08:ff:3f:e5:1c:35:b1:f9:88:c5:55:4d:
         54:3a:93:5d:eb:38:a5:e0:7a:cb:bd:d8:a3:38:40:0c:e8:b8:
         e5:3f:56:71:ff:bd:ec:47:47:5d:b3:73:6e:6f:43:02:c4:d6:
         15:13:18:e6:7c:8f:b9:ee:73:63:6d:47:8c:3a:71:38:ff:ec:
         3d:e1:39:d3:c1:fa:4c:75:d6:7c:15:bc:eb:dd:ca:fe:76:fc:
         b4:12:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org